I. INTRODUCTION

Dr. Edwin Cevallos Arellano acknowledges the importance of privacy and the protection of his patients' personal data. Therefore, he commits to safeguarding the privacy and personal data of his patients, in compliance with the Organic Data Law (LOPDP) of Ecuador and other applicable regulations. In accordance with the provisions of article 12 of the Organic Law for the Protection of Personal Data, Dr. Edwin Arnold Cevallos Arellano fulfills the obligation to inform his patients about the conditions under which their personal data is processed.

II. PERSONAL DATA THAT MAY BE PROCESSED AND ITS PURPOSES

Dr. Edwin Cevallos Arellano processes the personal data and those related to health detailed below, provided by his patients, with the purpose of generating Medical Records.

PATIENTS

From his patients, Dr. Edwin Arnold Cevallos Arellano may process the personal data and those related to health as follows: 1) Identifying information (such as name, identification card number, date of birth, sex, age); 2) Contact information (such as telephone, email, home address, work address, emergency contact); 3) Images collected through video surveillance cameras for security reasons; 4) Health data (blood type, previous diagnoses, allergies, medical reports and exams, treatments, previous surgical procedures, etc.); 5) Any information subscribed and delivered in the various forms, contracts, and annexes in relation to the services to be received from Dr. Edwin Arnold Cevallos Arellano.

Dr. Edwin Arnold Cevallos Arellano will process the personal data described here for the following purposes: 1) To attend to patient requirements; 2) To evaluate and learn about the effectiveness of different suggested products; 3) To generate statistics on general trends in the use of natural medicinal products; 4) For the offering of his products and services; 5) For the generation of Medical Records; 6) For compliance with legal obligations or court orders.

POSSIBLE PATIENTS

Dr. Edwin Arnold Cevallos Arellano may process personal and health-related data of potential patients who contact him through different communication channels (email, phone calls, etc.). The personal data will include all those provided by the data subject through the communication channels.

Dr. Edwin Arnold Cevallos Arellano may process the personal data described here solely for the following purposes: 1) To attend to the requirements of the data subject and the sending of notifications/responses related to the query made; 2) For the generation of a Medical Record of the data subject, if applicable; and 3) For compliance with legal obligations or court orders.

ON PERSONAL HEALTH-RELATED DATA

As a health professional, Dr. Edwin Arnold Cevallos Arellano may collect and process the health-related data of his patients who are or have been under his treatment, in accordance with article 30 of the LOPDP. Therefore, Dr. Edwin Arnold Cevallos Arellano is subject to the duty of confidentiality and professional secrecy regarding health-related data, to ensure the secure processing of these. In this way, he will avoid the unauthorized processing of this data.

For the processing of personal health-related data, the patient's prior consent will be required, except for the provisions established in the LOPDP.

III. DATA RETENTION PERIODS

Dr. Edwin Arnold Cevallos Arellano will keep personal data and those related to health of his patients indefinitely. Notwithstanding the aforementioned period, the data subject may request the deletion of their data at any time.

IV. MEASURES FOR THE PROTECTION OF PERSONAL DATA

Dr. Edwin Arnold Cevallos Arellano will take technical, organizational, and legal security measures to protect the personal data of his users against unauthorized access, loss, alteration, or destruction.

V. RIGHTS OF PERSONAL DATA SUBJECTS

The personal data subjects may exercise the following rights in relation to the processing of their personal and health-related data:

a. The right of access to their data contained in the files/banks/databases of Dr. Edwin Arnold Cevallos Arellano.
b. The right to rectification and updating of those data that may be incorrect or incomplete.
c. The right to deletion of their personal data, in the cases provided for in current regulations.
d. The right to object, which allows them to request the cessation of all or some of the treatments, such as the sending of communications that have purely commercial purposes.
e. The right to the suspension of data processing, for a limited period of time and in the cases established by current regulations.
f. The right to portability, which will allow them to request that their personal data be sent to them in a compatible, updated, structured, common, interoperable, and machine-readable format, preserving its characteristics.
g. The right to revoke consent given for the processing of their data.

To exercise their rights, personal data subjects must submit a written request addressed to Dr. Edwin Arnold Cevallos Arellano, specifying the right they wish to exercise and the information necessary to identify the personal data holder. Responses to the requests will be given within the period established by law. For this purpose, Dr. Edwin Arnold Cevallos Arellano has made available the email address protecciondatos@birm.com.

VI. LEGITIMATION BASIS

Dr. Edwin Arnold Cevallos Arellano will process the personal and health-related data of his patients when he has a legitimate basis for doing so. Dr. Edwin Arnold Cevallos Arellano commits to requesting prior consent before processing personal data, including health-related data; notwithstanding that, in the absence of such consent, he is authorized to process personal data under another basis of legitimation expressly provided for by law (such as the need to protect a vital interest, when the patient is not capable, physically or legally, of giving consent, etc.).

VII. CHANGES TO THE PRIVACY POLICY

Dr. Edwin Arnold Cevallos Arellano reserves the right to modify this privacy policy at any time, without prior notice. The updated version of the privacy policy will be available on the website: https://edwincevallosarellano.com/politica-privacidad/